EIP-2026-119374

The writeup describes a directory traversal vulnerability in Gleamtech FileVista/FileUltimate 4.6, allowing arbitrary file upload and execution via '..[SPACE]/' or '..[SPACE]\' bypass techniques. It includes a proof-of-concept video link and credits the researcher Soroush Dalili.